This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft File: dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft (raw, json) Hash identifier: 2RCjpBkp5VJaxVi/g9f7OyhfFAqHWr4Ggc8ez2t2Jgw= Subject key identifier: 3D:BB:20:20:9E:1C:A5:FE:7E:85:0A:29:43:16:38:9C:57:FB:BE:CF Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03 Certificate issuer: /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103 Certificate serial: 019B42B773DC421EE3086D62F058EC6AC1EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 21:01:17 +0000 Manifest this update: Sun 21 Dec 2025 21:01:17 +0000 Manifest next update: Mon 22 Dec 2025 21:01:17 +0000 Files and hashes: 1: asFNeSBZiInH59YAo8NnFAX0FVI.roa (hash: tWyj3lezAQYJJjmIcLo2JYfuhhBH90r26AXTVK2x0kY=) 2: dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl (hash: lQoyYnamG+BRCHEIPi4bDh/CozmBvNgcafiWO371hWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:73:dc:42:1e:e3:08:6d:62:f0:58:ec:6a:c1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103 Validity Not Before: Dec 21 21:01:17 2025 GMT Not After : Dec 22 21:01:17 2025 GMT Subject: CN=3dbb20209e1ca5fe7e850a294316389c57fbbecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1e:7d:bf:54:ac:84:01:2d:ec:5e:d8:c9:f3: 8b:e8:33:2e:51:15:ef:82:d5:39:05:e3:a7:e9:fc: fb:37:95:19:9f:e5:f5:b0:eb:ae:2e:6a:99:1d:01: a8:4f:09:19:c0:cb:83:d2:5c:58:a5:fe:b0:ba:13: 13:cd:12:a1:de:62:3c:a6:74:05:f3:39:7f:f9:e8: 2a:63:65:1f:1c:80:83:51:8f:0e:1a:51:77:0b:4f: 48:67:65:77:87:77:da:40:d2:83:e2:1c:73:ee:59: 57:6a:c2:45:56:a9:bb:ce:a3:bc:56:0c:20:1d:dd: cd:56:a8:5b:9b:c8:68:af:9b:de:90:f1:aa:9e:ca: 9f:12:fb:09:71:4b:c7:a9:46:55:1e:0e:46:0c:4b: 21:78:3c:75:6a:a6:76:97:6a:e9:9b:36:25:4c:f8: d6:18:72:9f:6e:d1:7f:35:b0:de:36:bb:a4:9a:f0: 99:34:19:9d:cd:32:92:ca:29:f0:0b:9e:ce:dd:66: 31:ee:ac:30:a1:86:c5:e6:94:18:26:26:ab:a2:71: 51:a9:04:63:cc:50:eb:c3:9d:26:4c:1b:0d:02:2d: 2c:6d:fd:e1:5f:83:89:23:ea:1f:e4:1c:2d:46:67: fe:79:2e:12:27:5b:8e:8f:ba:0e:2f:f4:d3:8b:61: e0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BB:20:20:9E:1C:A5:FE:7E:85:0A:29:43:16:38:9C:57:FB:BE:CF X509v3 Authority Key Identifier: keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e5:1c:91:0d:ca:81:e9:07:3a:b2:3b:89:6a:0e:14:81:30: 58:37:f7:af:1b:13:e2:04:5d:73:b9:ee:2c:1b:34:56:1d:a5: dc:19:e9:02:1d:7b:db:4a:43:bd:35:48:5a:0a:c7:ea:b5:23: 8e:e7:d1:fe:1b:27:c9:2c:bb:1c:a3:41:54:71:00:9c:98:be: 66:f2:73:0e:42:97:3b:e7:15:58:31:7a:d2:c1:38:bf:a5:e8: 37:9a:d3:41:79:1e:5e:94:bc:4c:58:d0:e7:8a:3d:4c:4d:c5: 7d:c5:59:97:0c:6a:9a:35:5e:b7:60:20:67:3d:58:d7:8f:2f: 97:c5:6e:2b:6d:bc:f8:a0:49:9b:44:32:b3:09:7b:73:c1:65: bc:58:a6:92:bd:45:33:c9:6d:15:4f:93:ec:9b:32:a3:ca:5e: 8b:73:62:c2:a9:5c:eb:ab:bb:91:90:94:f3:68:70:81:c2:51: 5a:f0:88:bf:da:4d:9c:f2:39:6d:08:f8:df:f1:db:b7:5f:e3: d5:40:7c:2e:81:00:ed:bc:55:ef:53:dd:95:6a:2e:c1:ec:59: 66:4e:ea:34:c3:eb:15:6c:fa:4c:5b:78:27:9a:01:2f:e2:54: 5e:3e:17:d3:23:9a:71:d4:88:f7:d9:40:17:35:85:7e:48:8d: 7a:73:c5:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt3PcQh7jCG1i8FjsasHsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTFiMDJkNTVkMzUwNWZiOWY5NzE5ZmJkMGI1MjMxNmZm NmMxMDMwHhcNMjUxMjIxMjEwMTE3WhcNMjUxMjIyMjEwMTE3WjAzMTEwLwYDVQQD EygzZGJiMjAyMDllMWNhNWZlN2U4NTBhMjk0MzE2Mzg5YzU3ZmJiZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh59v1SshAEt7F7YyfOL6DMuURXv gtU5BeOn6fz7N5UZn+X1sOuuLmqZHQGoTwkZwMuD0lxYpf6wuhMTzRKh3mI8pnQF 8zl/+egqY2UfHICDUY8OGlF3C09IZ2V3h3faQNKD4hxz7llXasJFVqm7zqO8Vgwg Hd3NVqhbm8hor5vekPGqnsqfEvsJcUvHqUZVHg5GDEsheDx1aqZ2l2rpmzYlTPjW GHKfbtF/NbDeNrukmvCZNBmdzTKSyinwC57O3WYx7qwwoYbF5pQYJiaronFRqQRj zFDrw50mTBsNAi0sbf3hX4OJI+of5BwtRmf+eS4SJ1uOj7oOL/TTi2HgZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD27ICCeHKX+foUKKUMWOJxX+77PMB8GA1UdIwQY MBaAFHVRsC1V01Bfuflxn70LUjFv9sEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZHd0xWWFRVRi01LVhHZnZRdFNNV18yd1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xMzZiNDMtM2I3Ni00YjE3LWEzNjYt ODRiN2Y2ODhiYTMwLzEvZFZHd0xWWFRVRi01LVhHZnZRdFNNV18yd1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xMzZiNDMtM2I3Ni00YjE3LWEzNjYtODRiN2Y2ODhiYTMw LzEvZFZHd0xWWFRVRi01LVhHZnZRdFNNV18yd1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+UckQ3K gekHOrI7iWoOFIEwWDf3rxsT4gRdc7nuLBs0Vh2l3BnpAh1720pDvTVIWgrH6rUj jufR/hsnySy7HKNBVHEAnJi+ZvJzDkKXO+cVWDF60sE4v6XoN5rTQXkeXpS8TFjQ 54o9TE3FfcVZlwxqmjVet2AgZz1Y148vl8VuK228+KBJm0Qyswl7c8FlvFimkr1F M8ltFU+T7Jsyo8pei3Niwqlc66u7kZCU82hwgcJRWvCIv9pNnPI5bQj43/Hbt1/j 1UB8LoEA7bxV71PdlWouwexZZk7qNMPrFWz6TFt4J5oBL+JUXj4X0yOacdSI99lA FzWFfkiNenPFcg== -----END CERTIFICATE-----Generated at Mon Dec 22 03:59:48 2025 by rpki-client